Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Vulnerabilities / Threats

1/26/2007
04:53 AM
Connect Directly
Google+
Twitter
RSS
E-Mail
50%
50%

SIM/Net Management Combo on Tap

eIQnetworks is about to release a new tool that integrates security and network management info

eIQnetworks on Monday will roll out a combination security information management (SIM)/network management platform that aims to bring the two worlds closer together, Dark Reading has learned.

The eIQnetworks new SecureVue software's arrival is timely: SIM technology is not only integrating more closely with traditional security tools, but it is also in the early stages of blending with traditional network operations tools, according to a new report by The 451 Group. (See Report: SIM Market to Heat Up and Blurring the Line Between SOC & NOC.)

While most organizations have no intention of combining their SOCs and NOCs, many are feeling pressure to get the two to communicate and share information better, often for compliance reasons. But integrating these traditionally separate worlds with their point solutions isn't easy -- it can be a costly, manually intensive task just to get to the bottom of a network event.

"There is too much time and money today spent in integrating these products," says Vijay Basani, co-founder and CEO of eIQnetworks. "Our goal is to define the incidents and necessary data to get to the bottom of an issue very quickly, with an overall cost benefit."

SecureVue encompasses SIEM, asset, configuration, performance, and vulnerability assessment functions, the company says. The SIEM features include real-time views of log management and forensics, and the asset and configuration components handle the typical management of hardware and software, as well as configurations for change control best practices. There is a performance analytics, and a vulnerability assessment piece centrally manages vulnerability scanners such as eEye Digital Security's Retina, ISS Scanner, and Nessus.

IPkey, a managed security services provider for small- to medium-sized businesses, has been beta-testing SecureVue and plans to purchase the tool. The company is looking at whether the multi-function product can replace its IPSwitch WhatsUp Professional network management tool, too.

Marcus Clarke, president of IPkey, says the possibility of consolidating the company's separate security and network management systems is attractive. "If we had a worm attack, for example, and we saw large amounts of bandwidth from a particular server of PC, we can't correlate those things automatically right now," he says. "SecureVue would let us do that."

Another benefit would be reducing the manpower it takes to run IPkey's redundant, co-location sites with two tools. "We have two separate physical facilities, so we double everything we do." And IPkey's technicians have to integrate any security and network issues "in their heads" now, he says, so the integration would save on manpower as well. IPkey runs eIQnetworks' Security Analyzer for monitoring security events.

"Correlation is a biggie for us," Clarke says. "That would give us the ability to develop some intelligence in our software and systems."

SecureVue is now shipping and runs on Windows and Linux. The central server component doesn't yet support Linux, but the regional and collection servers do. Pricing starts at $49,000.

— Kelly Jackson Higgins, Senior Editor, Dark Reading

  • eIQnetworks Inc.
  • The 451 Group Kelly Jackson Higgins is the Executive Editor of Dark Reading. She is an award-winning veteran technology and business journalist with more than two decades of experience in reporting and editing for various publications, including Network Computing, Secure Enterprise ... View Full Bio

    Comment  | 
    Print  | 
    More Insights
  • Comments
    Newest First  |  Oldest First  |  Threaded View
    Mobile Banking Malware Up 50% in First Half of 2019
    Kelly Sheridan, Staff Editor, Dark Reading,  1/17/2020
    Active Directory Needs an Update: Here's Why
    Raz Rafaeli, CEO and Co-Founder at Secret Double Octopus,  1/16/2020
    New Attack Campaigns Suggest Emotet Threat Is Far From Over
    Jai Vijayan, Contributing Writer,  1/16/2020
    Register for Dark Reading Newsletters
    White Papers
    Video
    Cartoon Contest
    Write a Caption, Win a Starbucks Card! Click Here
    Latest Comment: I've never actually seen the corporate ladder before.
    Current Issue
    The Year in Security: 2019
    This Tech Digest provides a wrap up and overview of the year's top cybersecurity news stories. It was a year of new twists on old threats, with fears of another WannaCry-type worm and of a possible botnet army of Wi-Fi routers. But 2019 also underscored the risk of firmware and trusted security tools harboring dangerous holes that cybercriminals and nation-state hackers could readily abuse. Read more.
    Flash Poll
    How Enterprises are Attacking the Cybersecurity Problem
    How Enterprises are Attacking the Cybersecurity Problem
    Organizations have invested in a sweeping array of security technologies to address challenges associated with the growing number of cybersecurity attacks. However, the complexity involved in managing these technologies is emerging as a major problem. Read this report to find out what your peers biggest security challenges are and the technologies they are using to address them.
    Twitter Feed
    Dark Reading - Bug Report
    Bug Report
    Enterprise Vulnerabilities
    From DHS/US-CERT's National Vulnerability Database
    CVE-2020-5216
    PUBLISHED: 2020-01-23
    In Secure Headers (RubyGem secure_headers), a directive injection vulnerability is present in versions before 3.9.0, 5.2.0, and 6.3.0. If user-supplied input was passed into append/override_content_security_policy_directives, a newline could be injected leading to limited header injection. Upon seei...
    CVE-2020-5217
    PUBLISHED: 2020-01-23
    In Secure Headers (RubyGem secure_headers), a directive injection vulnerability is present in versions before 3.8.0, 5.1.0, and 6.2.0. If user-supplied input was passed into append/override_content_security_policy_directives, a semicolon could be injected leading to directive injection. This could b...
    CVE-2020-5223
    PUBLISHED: 2020-01-23
    In PrivateBin versions 1.2.0 before 1.2.2, and 1.3.0 before 1.3.2, a persistent XSS attack is possible. Under certain conditions, a user provided attachment file name can inject HTML leading to a persistent Cross-site scripting (XSS) vulnerability. The vulnerability has been fixed in PrivateBin v1.3...
    CVE-2019-20399
    PUBLISHED: 2020-01-23
    A timing vulnerability in the Scalar::check_overflow function in Parity libsecp256k1-rs before 0.3.1 potentially allows an attacker to leak information via a side-channel attack.
    CVE-2020-7915
    PUBLISHED: 2020-01-22
    An issue was discovered on Eaton 5P 850 devices. The Ubicacion SAI field allows XSS attacks by an administrator.